Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230312e302f32342d3234203d3e20323134343332.roa
File: 38352e3233372e3230312e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: f0vExv+m9aZWlFS1+pnXoFLDzA3fM4rmW6GPKC6fINE=
Subject key identifier: A3:25:7B:A6:75:EF:57:EE:49:82:D0:89:28:DF:C1:98:D5:C5:B2:8A
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 172BD5390CC846D2C0C16BFBDBD87E831659E7AE
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230312e302f32342d3234203d3e20323134343332.roa
Signing time: Wed 26 Aug 2026 05:59:07 +0000
ROA not before: Wed 26 Aug 2026 05:54:07 +0000
ROA not after: Wed 25 Aug 2027 05:59:07 +0000
asID: 214432
IP address blocks: 85.237.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2b:d5:39:0c:c8:46:d2:c0:c1:6b:fb:db:d8:7e:83:16:59:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Aug 26 05:54:07 2026 GMT
Not After : Aug 25 05:59:07 2027 GMT
Subject: CN=A3257BA675EF57EE4982D08928DFC198D5C5B28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:7e:7a:c9:79:8f:c6:d5:c5:c4:ce:ca:f2:
7b:b5:0a:7d:df:86:b6:04:e8:02:d7:0f:88:2e:ed:
e2:6a:a5:5d:5c:aa:f1:75:86:a6:0d:98:d1:37:14:
9d:1b:eb:51:3a:52:33:e8:50:10:0d:e5:11:b3:ff:
e0:9d:a0:3e:ff:55:f3:de:7a:00:cc:49:50:38:e2:
00:8d:4c:e4:41:7a:e3:70:39:9c:63:45:05:36:db:
63:09:4d:f8:4d:5b:15:78:e8:ad:7d:e2:d8:22:fe:
15:92:53:b1:13:49:15:ce:8f:81:c4:8d:72:d0:63:
0b:38:e7:2d:e5:89:60:5e:60:14:dd:50:58:ae:35:
01:a4:2c:a2:0d:e7:a8:00:70:d0:44:6d:fa:5d:25:
44:84:7a:a8:45:fa:4a:10:1b:63:71:02:57:44:dd:
f7:13:c3:4d:ad:a6:ef:18:aa:8e:e8:0c:c0:06:be:
12:a2:26:d3:fd:fa:0d:86:2e:0c:07:d3:c1:7b:b3:
63:5f:59:db:d2:f8:ba:10:ca:72:5f:69:ae:eb:b8:
12:1f:5a:fb:10:6e:84:fc:7c:b8:5d:fb:42:85:96:
d8:e8:19:05:4f:c1:52:af:55:df:c3:63:0e:8e:27:
ec:17:26:d1:07:69:24:49:05:1b:8e:3e:3d:46:9f:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:7B:A6:75:EF:57:EE:49:82:D0:89:28:DF:C1:98:D5:C5:B2:8A
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230312e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.201.0/24
Signature Algorithm: sha256WithRSAEncryption
96:35:a7:c5:4c:03:3b:48:4a:68:7b:99:1e:a6:5d:7e:84:c2:
af:d7:3a:86:d6:fe:8b:ec:8d:cf:60:a9:25:51:97:a8:79:c3:
97:49:9b:ea:fc:a7:a5:d1:82:ba:2a:0f:51:b8:be:6f:b9:d7:
bb:da:5b:4f:6a:d9:7a:2c:00:31:54:b4:50:f1:7f:f6:8f:04:
df:75:7d:b0:2c:34:43:a4:c9:dd:2c:56:57:b5:2d:c8:96:76:
90:d2:88:50:b7:65:15:9c:25:31:c3:77:58:8e:b4:cd:1f:b3:
ec:66:a9:ab:ab:11:7f:10:00:9c:ca:ae:2e:b2:9c:41:92:e3:
92:9a:64:ef:24:e6:11:b3:5d:61:f6:89:e4:1b:03:e6:ca:44:
3c:50:92:82:51:c7:ee:d2:73:a5:a8:d7:c4:eb:71:6c:f9:9d:
cd:92:04:48:38:24:ea:80:3f:8d:82:1d:20:ec:a7:98:1e:1a:
56:c1:08:b6:cc:1d:16:f3:4a:46:79:fd:da:31:cb:7d:cc:9f:
aa:77:d7:0d:bd:91:29:6a:a9:36:10:7d:3b:6a:64:2c:ec:07:
87:65:ff:c7:dd:4e:64:6c:b6:e8:4d:2e:6c:a6:d5:8f:6a:28:
42:91:7c:f3:5a:f9:73:32:b4:5b:35:12:20:96:c9:cd:9d:40:
94:6e:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:48:12 2026 by rpki-client